CONTENT MANAGEMENT SYSTEM 



BACKGROUND OF THE INVENTION 

•r 

5 1. Field of the Invention 

The present invention relates to a content management 
system for managing content as electronic data, and more 
particularly to a content management system for storing 
content in an exchangeable storage medium and managing the 

10 original content. 

2 . Description of the Related Art 

Due to recent developments in information processing 
systems, documents, diagrams, and other such content stored 
on paper has begun to be stored as electronic data. Because 

15 such electronic data can be easily changed, the original 
must be managed as electronic data. 

Electronic data must therefore be provided with the 
following original attributes to enable content management 
of electronic data: first, a function that makes it possible 

20 to detect that the original electronic data has not been 

altered; second, a function that prevents third parties from 
unauthorized viewing of the electronic data; third, a 
history management function for the actual steps involved in 
the handling of the original electronic data; fourth, a 

25 function that makes it possible to trace the contents of 
each version or any changes in the original; and fifth, a 
function for guaranteeing the uniqueness of the original. 
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According to such requirements, in order to prevent 
tampering , a file server stores an electronic data, has an 
authority to access the file server (passwords and the 
like), and logs the operating history. While this method 
5 can prevent the original from being altered, it is still 
difficult to manage revisions to the original or to 
guarantee uniqueness of the original. For example, when 
electronic data is copied, it is unclear which original the 
copied data corresponds to. 

10 It has therefore been proposed that electronic data of 

each edition be saved on the hard disk or other such 
internal storage device of a file server, that the revision 
number history of each edition be saved, and that original 
attributes (which signify that the original has not been 

15 altered) of electronic data on a file server be guaranteed 
(for example, Japanese Patent Application Laid-open 
No. 2002-82821). 

However, the above-mentioned proposal is concerned with 
saving electronic data in a storage device of a file server, 

20 so the electronic data must be saved on an external storage 
medium and is divided between the internal storage medium 
and external storage medium when the volume of the 
electronic data surpasses the capacity of the storage 
device, complicating the system for managing the original. 

25 A specific drawback is that existing expandability is 
insufficient to handle an increase in the volume of 
electronic data (original). 
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The original attributes of electronic data are 
difficult to manage when the electronic data is saved on an 
external storage medium. Specifically, saving electronic 
data on an external storage medium allows the original to be 
5 taken out because of the nature of the external storage 
medium, making it difficult to manage the original and to 
distribute reproductions of the original while protecting 
the original or the copyright. 

10 SUMMARY OF THE INVENTION 

Consequently, an object of the present invention is to 
provide a content management system capable of easily 
managing an original when the original is saved on an 
external storage medium in response to an increase in the 
15 volume of electronic data in the original. 

Another object of the present invention is to provide a 
content management system capable of saving data managed as 
an original on an external storage medium when the original 
is saved on an external storage medium in response to an 
20 increase in the volume of electronic data in the original. 

A further object of the present invention is to provide 
a content management system for unifying management of each 
version of an original when the original is saved on an 
external storage medium in response to an increase in the 
25 volume of electronic data in the original. 

In order to achieve these objects, the content 
management system of the present invention comprises a 
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management device for managing the content processing 
history and a portable medium for saving the content, that 
is removed and attached to the management device and has a 
media ID. And the management device, on a request from an 
5 external device, registers and revises the content on the 
portable medium and manages processing history and the media 
ID for the content. 

In the present invention, serial management or 
processing history of content is stored in the management 

10 device and data is managed solely by the portable medium, 
making it easier to respond to an increase, in the volume of 
electronic data. The history of updates to the original can 
be managed by the system, and because a medium having a 
medium-specific media ID is treated as original data, the 

15 uniqueness of the original can be established by the media 
ID. 

Another preferred feature of the present invention is 
that the management device creates a registration 
certificate in response to registration and revision of the 

20 content, stores the result together with the content on the 
portable medium, determines the validity of the registration 
certificate from the external device, and allows access to 
the content of the portable medium. This allows the stored 
content to be accessed only by users notified of the 

25 registration certificate, and prevents unauthorized access. 

Yet another preferred feature of the present invention 
is that the management device creates a registration 
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certificate in response to registration and revision of the 
content, stores the result as content management 
information, determines the validity of the registration 
certificate from the external device, and allows the content 
5 processing history to be read. This allows the content 
history to be accessed only by those notified of the 
registration certificate, and prevents unauthorized access. 

Still another preferred feature of the present 
invention is that the management device encrypts the content 

10 with an encryption key produced by random numbers in 

response to the content storage, encrypts the encryption key 
with the media ID, and stores the encrypted content and 
encrypted encryption key on the portable medium of the media 
ID. This can prevent unauthorized reading and maintain the 

15 uniqueness of the original even if the portable medium is 
taken out. 

Another feature of the present invention is that the 
management device creates and stores serial content managing 
information in response to registration and revision of the 

20 content. The relationship between the initial version and 
revised versions of the original is thus specified. 

Furthermore, the present invention should preferably 
comprise a copying medium for storing the encrypted content 
on the portable medium and distribute the encryption key and 

25 the copying medium to users of the copying medium. This 
allows only authorized distributors to use copies of 
registered content and ensures copyright protection. 



5 



An additional preferred feature of the present 
invention is that the management device and the external 
device are networked. This allows content to be easily 
registered and updated the portable media in the management 
5 device . 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a structural diagram of a content management 
system of the first embodiment of the present invention; 
10 Fig. 2 is an explanatory diagram of the storage medium 

with a media ID in Fig. 1; 

Fig. 3 is an explanatory diagram of original management 
in the management device in Fig. 1; 

Fig. 4 is a flowchart of the document registration 
15 routine in the structure in Fig. 1; 

Fig. 5 is an explanatory diagram of the document 
registration processing flow in Fig. 4; 

Fig. 6 is a flowchart of the document updating routine 
in the structure in Fig. 1; 
20 Fig. 7 is an explanatory diagram of the document 

updating routine in Fig. 6; 

Fig. 8 is a flowchart of the registered document 
reading routine in the structure in Fig. 1; 

Fig. 9 is a flowchart of the history reference routine 
25 in the structure in Fig. 1; 

Fig. 10 is an explanatory diagram of the content 
copying medium in Fig. 2; and 
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Fig. 11 is an explanatory diagram of the operation for 
accessing the original according to the first embodiment of 
the present invention. 

5 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The embodiments of the present invention are described 
hereinbelow as a content management system, content 
management routine, and other embodiments, but the present 
invention is not limited to the following embodiments. 

10 

[Content Management System] 

Fig. 1 is a structural diagram of a content management 
system of the first embodiment of the present invention, 
Fig. 2 is an explanatory diagram of data stored on a secure 

15 medium in Fig. 1, and Fig. 3 is an explanatory diagram of 
the original management routine in Fig. 1. 

As shown in Fig. 1, clients (terminals) 2-1, 2-2, 2-3, 
and 2-4, who are registering data, are connected by a 
network 3 to a management device 1 for managing the 

20 original. The management device 1 is composed, for example, 
of a file server. The clients 2-1 through 2-4 are composed 
of personal computers comprising, for example, a display, a 
keyboard, and a processing unit. The network 3 is composed, 
for example, of a LAN (Local Area Network). 

25 The management device 1 has a processor (CPU) 10 for 

performing an original management routine 16, a hard disk 
device (HDD) 12 for storing original management information 
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and serial information for original management , a drive for 
external storage media 4-1, 4-2, and 4-3 that store the 
original, and a bus 18 for connecting these components. 
The external storage media 4-1, 4-2, and 4-3 are 
5 composed of magneto-optical disks (MO) or other such 
security storage media. A security medium is a storage 
medium provided in advance with a media ID (identifier) that 
is characteristic of the storage medium, and is a medium 
that has increased security. In this example, the security 
10 media 4-1, 4-2, and 4-3 are composed of portable MO's, and a 
single MO drive or a plurality of drives are connected by 
the bus 18. 

As shown in Fig. 2, the data composition of the 
security media 4 comprises a medium- specific media ID 20, 

15 data 26 encrypted using a random number as the data 

encryption key, and a key 22 in which the data encryption 
key composed of the random number is encrypted by the media 
ID. A registration certificate 24 for original management 
to be later described is also stored. 

20 Such security media are identified by media IDs. In 

the present invention, these security media are used to save 
the original. 

Next, the original is managed by the management 
device 1. Fig. 3 is an explanatory diagram describing the 

25 original management routine 16 in Fig. 1. The relationship 
between the different versions of the original is defined by 
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serial information, and management information 24, 30, and 
32 are defined for the original of each version. 

Operating history information 30 manages, according to 
history, who performed what routine at what time on the 
5 original of each version; for example, the registrant, the 
date of registration, the reader, the date of reading, the 
reviser, the date of revision, and the like. The original 
of each version (initial version, second version, Nth 
version) is saved as is so that persons wishing to verify 

10 former editions can return to the state existing at that 

time. The original of each version is saved as such on the 
above-mentioned security medium. 

The registration certificate information 24 is issued 
at the time the original is registered and may, for example, 

15 consist of a document management number or the like. 
Location information 32 indicates the media ID of the 
media 4-1, 4-2, and 4-3 on which data is archived. 

Basic functions of the original management routine 16 
will be described. When the clients 2-1 through 2-4 

20 register data, this data is transmitted upon request to the 
management device 1. Upon registry, the management device 1 
creates and manages serial management information, operating 
history, and other types of original management information. 
Data to be request registration is encrypted as previously 

25 described in the portable media (security media) 4-1 through 
4-3 provided with media IDs, and is stored as an original. 
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Upon registering a document (data), the management 
device 1 returns a registration certificate having 
registered positional information (document management 
number) to the client. It is then possible to designate a 
5 registration certificate and to read original management 
information such as the revision history, the date of 
revision, and the reviser. 

When registration data is then updated, the client 2-1 
through 2-4 transmit updated data and a registration 

10 certificate of the registration data to be updated to the 
management device 1 . The management device 1 manages the 
result as serial data similar to the target original. As 
with registration, this updated data is written into the 
portable media 4-1 through 4-3 provided with media IDs. 

15 Specifically, the question of who performed what routine at 
what time is managed by the operating history 30, and each 
version number is saved, because persons wishing to verify 
former editions can return to the state existing at that 
time. 

20 Specifically, the serial management information is 

management information for displaying a series consisting of 
the initial version, second version, and Nth version of the 
original, and this information is created by registering and 
updating the original. The original management information 

25 has, for each original, a registration certificate 24, an 
operating history 30 as a history of who conducted the 
registration/update at what time, and location 
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information 32 for displaying the media IDs of media with 
archived data. 

The original management routine 16 of the CPU 10 
conducts a management routine (serialized routine) of 
5 registration/updates as previously described. The original 
itself is stored in the portable media 4-1 through 4-3 , and 
can be read by the clients 2-1 through 2-4. If necessary, 
the portable media can be used to send a transmission to a 
device environment devoid of the original management 
10 routine 16. 

The original is commonly copied by a procedure in which 
data is read by the clients 2-1 through 2-4 from the 
portable media 4-1 through 4-3 , and distribution media can 
be created by copying according to the same logic. 

15 

[Content Management Routine] 

Next, the original management routine for the CPU 10 in 
Fig. 1 will be described with reference to Figs. 4 through 
11. 

20 Fig. 4 is a flowchart of a document registration 

routine (initial version registration routine), and Fig. 5 
is an explanatory diagram of the operation thereof. The 
document registration routine is described according to 
Fig. 4 with reference to Fig. 5. 

25 (S10) The host devices (clients) 2-1 through 2-4 issues 

registration document data and a registration request to the 
management device 1 . 
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(S12) Upon receiving the registration request, the 
management device 1 creates serial management 40 and 
processing history 24, 30, and 32 in an internal disk 
device 12. Specifically, the initial version of the 
5 original is registered as serial management information 40, 
and the initial version registration information 
(registrant, date of registration, etc.) is registered in 
the operating history 30. 

(S14) Next, an encryption key is produced by random 
10 numbers, and the document data and registration certificate 
are encrypted. Next, the media ID is read from the portable 
write medium 4-1, and the encryption key is encrypted using 
the media ID as the key. 

(S16) The CPU 10 writes the encrypted document 26, the 
15 registration certificate 24, and the encrypted encryption 
key 22 to the portable medium 4-1. The registration 
certificate 24 and location information (media ID) 20 are 
registered on the disk device 12 as original management 
information. 

20 (S18) The management device 1 notifies the registration 

certificate to the client 2-1 who has requested a 

registration . 

Thus, only the original portion is written to the 

portable media 4-1 through 4-3, and the original management 
25 information is archived and managed by the management 

device 1. Therefore, the original can be managed in a 
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consolidated manner by the management device even when 

stored on expandable portable media. 

Since data is encrypted and stored in the portable 

media 4-1 through 4-3 by a method in which random numbers 
5 created by the management device 1 are used as an encryption 

key, read limitations are imposed and unauthorized reading 

can be prevented. Since the media IDs of the portable 

media 4-1 through 4-3 are encrypted by random numbers as a 

common key (key with encrypted data) and written in, it is 
10 all the more difficult to decipher each data encryption key, 

and unauthorized reading can be prevented when the original 

is stored in the portable media. 

Fig. 6 is a flowchart of a document updating routine 

(revision registration routine), and Fig. 7 is an 
15 explanatory diagram of the operation thereof. The document 

updating routine is described according to Fig. 6 with 

reference to Fig. 7. 

(S20) The host devices (clients) 2-1 through 2-4 issues 

a registration certificate, updated document data, and an 
20 updating request for the initial version to the management 

device 1. 

(S22) Upon receiving an updating request, the 
management device 1 refers to the serial management 40 and 
processing history 24, 30, and 32 on the internal disk 
25 device 12 on the basis of the received registration 

certificate, and determines the original series. Next, the 
second version of the original corresponding to the initial 



version of the original is registered as serial management 
information 40, and updating registration information 
(updater, date of updating, and the like related to the 
initial version of the original; and second version 
5 preparer, date of preparation, and the like related to the 
second version of the original) is registered in the 
operating history 30. 

(S24) Next, an encryption key is produced by random 
numbers, and the updated document data and registration 

10 certificate are encrypted. Next, media ID 2 is read from 
the portable write medium 4-2, and the encryption key is 
encrypted using the media ID 2 as the key. 

(S26) The CPU 10 writes the encrypted document 26, the 
registration certificate 24, and the encrypted encryption 

15 key 22 to the portable medium 4-2. The registration 

certificate 24 and location information (media ID) 20 are 
registered on the disk device 12 as original management 
information for the second version of the original. 

(S28) The management device 1 notifies the registration 

20 certificate for the second version to the client 2-1 who has 
requested an update. 

Thus, only the original portion is written to the 
portable media 4-1 through 4-3, and the original management 
information is archived and managed by the mainframe 

25 device 1. Therefore, the original series can be managed in 
a consolidated manner by the management device even when the 
original is stored on expandable portable media. 
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Next, the routine for reading the original data stored 
in the portable media will be described with reference to 
the flowchart of the registered document reading routine in 
Fig. 8. 

5 (S30) The host devices (clients) 2-1 through 2-4 

directs a request for reading the data to the management 
device 1 together with the registration certificate of the 
document to be read. 

(S32) The management device 1 compares the registration 
10 certificate of the original management information 32 on the 
disk device 12 with the requested registration certificate, 
and it is determined whether the two correspond. If they do 
not correspond, the routine is terminated. 

(S34) If the registration certificates are confirmed to 
15 be identical, the management device 1 checks the portable 
medium 4-1 inserted into the drive and reads the media 
ID 20. The encrypted encryption key 22 stored in the 
portable medium 4-1 is decrypted by the media ID 20. 

(S36) The encrypted document 26 stored in the portable 
20 medium 4-1 is decrypted by the decrypted encryption key. 

(S38) The decrypted data is delivered to the clients 2- 
1 through 2-4. 

Next, the history reference routine for the original 
data will be described with reference to the flowchart of 
25 the history reference routine in Fig. 9. 

(S40) The host devices (clients) 2-1 through 2-4 
directs the request for history reference to the management 
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device 1 together with the registration certificate of the 
document to be read. 

(S42) The management device 1 compares the registration 
certificate of the original management information 32 on the 
5 disk device 12 with the requested registration certificate, 
and it is determined whether the two correspond. If they do 
not correspond, the routine is terminated. If the 
registration certificates are confirmed to be identical, the 
operating history 30 is retrieved. 

10 (S44) The retrieved operating history is delivered to 

the clients 2-1 through 2-4. 

Thus, serial management or processing history is stored 
in the original management device 1 and can be managed 
solely as data by the portable media. Therefore, the 

15 history of updates to the original can be managed by the 
system. It is possible to retrieve and archive a single 
medium in a safe location (a vault or the like) in order to 
store data in a medium having a media ID. It is possible to 
establish the uniqueness of the original by a medium- 

20 specific media ID because a medium having this media ID is 
treated as original data. 

Furthermore, when copies of the medium are distributed, 
only data 26 encrypted by an encryption key is stored in a 
distribution medium 4-n, whereas the encryption key and 

25 registration certificate are not stored, as shown in 
Fig. 10. Data encrypted by media IDs for which an 
encryption key is provided is distributed to a distributor 



as a license. Therefore, only a user with distributed media 
and a license can decrypt the data, so only a licensed user 
who possesses an authentic distribution medium can use the 
stored data. 

5 Fig. 11 is an explanatory diagram of the aspects of 

licensing the original and reproduction according to the 
present invention. When the original is used within the 
management device (online), the original can be registered, 
updated, referenced, and read according to the registration 

10 certificate, as shown in Fig. 11. 

When making authorized reproductions of the original, 
only a licensed user in possession of an authorized 
distribution medium can read the stored data because this 
user has the permission to use the encryption key, as shown 

15 in Fig. 10. 

Thus, serial management or processing history is stored 
in the original management 1 and can be managed solely as 
data by the portable media. Therefore, increases in the 
volume of electronic data can be easily handled, the history 

20 of updates to the original can be managed by the system, and 
the uniqueness of the original can be established by a 
medium-specific media ID because a medium having this media 
ID is treated as original data. 

Furthermore, when copies of the medium are distributed, 

25 only a licensed user with an authorized distribution medium 
can use the stored data. Therefore, reproductions can be 
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used while only data in which the original attributes are 
protected in portable media is managed using portable media. 

[Other Embodiments] 
5 In the above-mentioned embodiments , secure media was 

described with reference to MO (magnetooptic disk) , but CD- 
Rs, DVDs and other such optical disks , portable magnetic 
disks, semiconductor memory, and the like can also be used. 
Documents, diagrams, and the like can be used as electronic 

10 data in the form of an original. 

The present invention was described above by way of 
embodiments, but various modifications can also be made 
within the scope of the essence of the present invention, 
and these need not be excluded from the scope of the present 

15 invention. 

Serial content management or processing history is 
stored in an original management device, and data alone is 
managed by a portable medium, making it possible to respond 
easily to an increase in the volume of electronic data. The 

20 history of updates to the original can be managed* by the 
system. The uniqueness of the original can be established 
by a medium-specific media ID because a medium having this 
media ID is treated as original data. 



